ansible-collections/middleware_automation.keycloak
1
0
Fork 0
mirror of https://github.com/ansible-middleware/keycloak.git synced 2025-04-06 19:00:28 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge pull request #109 from msherman13/feature/msherman/quarkus_none_proxy

Browse source 
keycloak_quarkus: skip proxy config if `keycloak_quarkus_proxy_mode` is `none`
This commit is contained in:
Guido Grazioli 2023-09-19 10:46:24 +02:00 • committed by GitHub
commit bef20b6a57
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/keycloak_quarkus/defaults/main.yml
View file

@ -49,7 +49,7 @@ keycloak_quarkus_db_enabled: "{{ True if keycloak_quarkus_ha_enabled else False
keycloak_quarkus_http_relative_path: auth
keycloak_quarkus_frontend_url: http://localhost:8080/auth
# proxy address forwarding mode if the server is behind a reverse proxy. [edge, reencrypt, passthrough]
# proxy address forwarding mode if the server is behind a reverse proxy. [none, edge, reencrypt, passthrough]
keycloak_quarkus_proxy_mode: edge
# disable xa transactions

2
roles/keycloak_quarkus/meta/argument_specs.yml
View file

@ -243,7 +243,7 @@ argument_specs:
keycloak_quarkus_proxy_mode:
default: 'edge'
type: "str"
description: "The proxy address forwarding mode if the server is behind a reverse proxy"
description: "The proxy address forwarding mode if the server is behind a reverse proxy. Set to 'none' if not using a proxy"
keycloak_quarkus_start_dev:
default: False
type: "bool"

2
roles/keycloak_quarkus/templates/keycloak.conf.j2
View file

@ -34,8 +34,10 @@ cache-config-file=cache-ispn.xml
cache-stack=tcp
{% endif %}
{% if keycloak_quarkus_proxy_mode is defined and keycloak_quarkus_proxy_mode != "none" %}
# Proxy
proxy={{ keycloak_quarkus_proxy_mode }}
{% endif %}
# Do not attach route to cookies and rely on the session affinity capabilities from reverse proxy
#spi-sticky-session-encoder-infinispan-should-attach-route=false